VULNERABILITY INTELLIGENCE

CVE-2021-25644

CVSS score7.5 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2021-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators.

Weakness classification

  • nvd@nist.gov: CWE-312

Primary references